Search the Community

IPBan Monitors failed logins and bad behavior and bans ip addresses on Windows and Linux. Highly configurable, lean and powerful. Requirements IPBan requires .NET core 3.0 SDK to build and debug code. For an IDE, I suggest Visual Studio Community 2019 for Windows, or VS code for Linux. All are free. You can build a self contained executable to eliminate the need for dotnet core on the server machine, or just download the precompiled binaries. Running and/or debugging code requires that you run your IDE or terminal as administrator or root. Officially supported platforms: Windows 8.1 or newer (x86, x64), Windows Server 2012 or newer (x86, x64), Linux Ubuntu 16.04+ or equivelant (x64). Windows Server 2008 will work with some tweaks, but it is basically at end of life, so no longer officially supported. Mac OS X not supported at this time. Features Auto ban ip addresses on Windows and Linux by detecting failed logins from event viewer and/or log files. On Linux, SSH is watched by default. On Windows, RDP, OpenSSH, VNC, MySQL, SQL Server and Exchange are watched. More applications can easily be added via config file. Highly configurable, many options to determine failed login count threshold, time to ban, etc. Make sure to check out the DigitalRuby.IPBan.dll.config file (in the IPBanCore project) for configuration options, each option is documented with comments. Banning happens basically instantly for event viewer. For log files, you can set how often it polls for changes. Very fast - I've optimized and tuned this code since 2012. The bottleneck is pretty much always the firewall implementation, not this code. Unban ip addresses easily by placing an unban.txt file into the service folder with each ip address on a line to unban. Works with ipv4 and ipv6 on all platforms. Please visit the wiki at [Hidden Content] for lots more documentation. IPBan 1.5.3.0 Fix whitelist and blacklist regex to work properly in all cases [HIDE][Hidden Content]]